Portal Users

Administrators are given permissions to certain advanced actions to manage the rest of WorkSpaces estate. These permissions can be granularly assigned in WorkSpaces Manager to Portal Administrators to do specific tasks.

This section allows us to delegate support roles so that different users have access to the WorkSpaces Manager console with different Administration rights. For example, you may have two staff members who look after users who have critical roles and policy stipulates that they are the only allow to change the reboot times for their WorkSpaces.

Before you do this, check the Roles section, and make sure that there is an Administrator role set up with full permissions

Adding a new Administrator

To add a new Portal administrator, select the icon on the right and select "Create User".

Now, fill in the administrator details from Active Directory, preferably. Ensure that the username is prefixed with your domain name (e.g.: CLOUD\username). You can choose the Role SuperAdmin or the Admin role you have created.

Restricting users to Accounts, Regions or Directories

For delegation of support roles purposes, you may wish to have Portal Administrators restricted to WorkSpaces in specific AWS Regions (e.g., a Support team in APAC); specific WorkSpace Directories (e.g., which may contain Finance and Marketing users only); or WorkSpace Tags (e.g., the Department is "R&D").

With this role (Admin Role), we have restricted the users that are assinged to the role to WorkSpaces in eu-west-1, eu-west 2 and eu-central-1 Region, with a specific WorkSpace Directory, and any WorkSpaces that are in the assinged AWS Account (Multiple options if Multi AWS accounts is setup). They cannot administer anything other than these WorkSpaces (for example, they cannot terminate\reboot a WorkSpace in us-east-1). You can add remove Accounts, Regions and Directories by clicking the bin icon to the right of it.

Its worth noting that Directories override Regions and Accounts override Directories and Regions

Last updated